<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 04/19/2014 12:43 PM, arjan tijms
wrote:<br>
</div>
<blockquote
cite="mid:CAE=-AhDGUmJKJHuv0TnDEsnfGXXNy3aWvyARr1B=Kpx9ndZc8g@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>Just wondering, but what is the primary use case for a
security manager server side?</div>
<div><br>
</div>
<div>While the model obviously makes sense for Applets and
Webstart where untrusted code is executed on the user's
machine, I found it to be extremely rare for a server to run
untrusted code. In fact, I don't think I've ever seen this
situation.</div>
</div>
</blockquote>
I agree with what you are saying. Unfortunately there are a handful
of users/developers/sys-admins who are required to run the JVM under
the JSM. Might be corporate policy or compliance etc.<br>
Luckily they are a minority. They always pinpoint if there are any
particular permission failing under the JSM.<br>
<br>
The JSM was really invented around the applet era and has really not
seen any major adaptation/overhaul for the s/w industry growth.<br>
<br>
<blockquote
cite="mid:CAE=-AhDGUmJKJHuv0TnDEsnfGXXNy3aWvyARr1B=Kpx9ndZc8g@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>There's maybe a case to prevent privilege escalation in
case of a legitimate app being hacked, but in practice it
doesn't look like a security manager is really being used a
lot for that, is it? Instead the default thing to do there
seems to be to run the AS under a user with limited rights on
the host OS and/or use things like SELinix or Virtual Servers
(e.g. XEN) to isolate the complete AS.</div>
<div><br>
</div>
<div>Kind regards,</div>
<div>Arjan Tijms</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Sat, Apr 19, 2014 at 1:53 AM, Jason
T. Greene <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:jgreene@redhat.com" target="_blank">jgreene@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
Sent from my iPhone<br>
<div class=""><br>
> On Apr 18, 2014, at 5:50 PM, Stuart Douglas <<a
moz-do-not-send="true"
href="mailto:stuart.w.douglas@gmail.com">stuart.w.douglas@gmail.com</a>>
wrote:<br>
><br>
><br>
> Enabling the security manager by default is a
terrible idea.<br>
<br>
</div>
+1000<br>
<div class="HOEnZb">
<div class="h5">___________<br>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</body>
</html>